Lucene search

CVE-2022-4840

🗓️ 29 Dec 2022 17:21:15Reported by @huntrdevType

CVE-2022-4840 Cross-site Scripting (XSS) in GitHub repository usememos/memo

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
Github Security Blog	usememos/memos vulnerable to stored Cross-site Scripting	29 Dec 202218:30	–	github
Huntr	Stored XSS in memos while creating	23 Dec 202215:37	–	huntr
Cvelist	CVE-2022-4840 Cross-site Scripting (XSS) - Stored in usememos/memos	29 Dec 202200:00	–	cvelist
Vulnrichment	CVE-2022-4840 Cross-site Scripting (XSS) - Stored in usememos/memos	29 Dec 202200:00	–	vulnrichment
OSV	GHSA-PWHR-P68W-296X usememos/memos vulnerable to stored Cross-site Scripting	29 Dec 202218:30	–	osv
OSV	CVE-2022-4840	29 Dec 202217:15	–	osv
Prion	Cross site scripting	29 Dec 202217:15	–	prion
Veracode	Cross-site Scripting (XSS)	3 Jan 202306:50	–	veracode
NVD	CVE-2022-4840	29 Dec 202217:15	–	nvd
RedhatCVE	CVE-2022-4840	5 Feb 202520:17	–	redhatcve

Nvd

Node

usememos memosRange<0.9.1

[
  {
    "vendor": "usememos",
    "product": "usememos/memos",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.9.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/b42aa2e9-c783-464c-915c-a80cb464ee01
github	www.github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Dec 2022 17:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.4 - 7.6

EPSS0.00126

SSVC

CWE-79